msi-central_privesc

CVE-2022-38532 Privilege escalation locale nell'applicazione desktop MSI Center. La vulnerabilità risiede in "CFeatures" di MSI.CentralServer.exe. MSI.CentralServer.exe è un'applicazione che raccoglie informazioni sul sistema, collaborando con MSI.TerminalServer.exe. La funzione ExecuteTask, che...

CVE-2021-27965

CVE-2021-27965 Il driver MsIo64.sys prima della versione 1.1.19.1016 in MSI Dragon Center prima della versione 2.0.98.0 presenta un buffer overflow che consente l'escalation dei privilegi tramite una richiesta IOCTL 0x80102040, 0x80102044, 0x80102050 o 0x80102054 opportunamente predisposta. Quest...

CVE-2023-32353-PoC

CVE-2023-32353 प्रूफ ऑफ कॉन्सेप्ट अस्वीकरण यह प्रूफ ऑफ कॉन्सेप्ट कोड शैक्षिक उद्देश्यों के लिए प्रकाशित किया गया है। इसका उद्देश्य अन्य लोगों को समान कमजोरियां खोजने, उन्हें जिम्मेदारी से रिपोर्ट करने और उन्हें ठीक करने के लिए प्रोत्साहित करना है। 23 मई, 2023 को एप्पल ने इस कमजोरी के लिए एक फिक्स...

msi-search

MSI Search Windows memorizza nella cache i file MSI in C:\Windows\Installer\ con nomi di file casuali composti da lettere e numeri seguiti dall'estensione ".msi". Questo strumento semplifica il compito degli operatori red team e dei team di sicurezza di identificare quali file MSI corrispondono a...

CVE-2024-0670

CVE-2024-0670 – Lokale Privilegienausweitung im CheckMK Agent PowerShell PoC Zusammenfassung Dieses Repository präsentiert einen unabhängigen PowerShell-Proof-of-Concept für CVE-2024-0670 , eine Windows-Schwachstelle zur lokalen Privilegienausweitung im CheckMK Agent. Die Schwachstelle ermöglicht...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

rewolf-msi-exploit

rewolf-msi-exploit Elevazione locale dei privilegi MSI NTIOLib/WinIO Maggiori informazioni sono disponibili qui: http://blog.rewolf.pl/blog/?p=1630...

Vision-MSI-Thermal-Control

Vision MSI Controllo Termico Gestione termica Linux per MSI Modern 15H AI C1MG-096IT - Controllo EC con reverse engineering, profili ventola e soglia di carica batteria 🎯 Scopo del Progetto Questa applicazione è nata dalla necessità degli utenti di laptop MSI su Linux. Il percorso è iniziato quan...

GwisinMsi

GwisinMsi Questo repository contiene la PoC del payload MSI utilizzato nel post del blog. Il payload si basa sull'analisi del payload MSI del ransomware Gwisin effettuata dal team AhnLab ASEC nel loro post del blog. Configurazione di compilazione DLL Progetto Proprietà del progetto C/C++...

msiscan

Analizzatore MSI Questo script Python per Linux può analizzare i file di installazione Microsoft Windows .msi e segnalare potenziali vulnerabilità. È stato sviluppato da Michael Baer @derbaer0 nel SEC Consult Vulnerability Lab. Attualmente, è adatto principalmente a un'escalation di privilegi...

CVE-2026-74317 ixgbe: do not configure xps for XDP queues

In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netifsetxpsqueue should not be called for an XDP Tx queue, since such queues are not netdev-exposed. On systems with number of CPUs =64, on E610 adapter, netdev is configured with maximu...

UBUNTU-CVE-2026-68191

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NULL pointer dereferences occur in irqworksync called from rhashtabledestroy. Two hash tables are affected: 1. ath12klinks...

CVE-2026-71993

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

CVE-2026-71988

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands an...

CVE-2026-71990

MSI Radix AXE6600 router firmware version v781521 contains a command-injection vulnerability in the TelnetSSH function used for SSH configuration. Remote attackers can exploit the SSH configuration interface to inject arbitrary commands and obtain root privileges on the device. No remediation det...

CVE-2026-71989

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the porTrigger function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious command...

CVE-2026-71988

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the portFw function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit this vulnerability through the alg function to execute malicious commands an...

CVE-2026-71983

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized...

CVE-2026-71984

MSI Radix AXE6600 router firmware v781521 includes a command-injection vulnerability in the urlfilter function that allows remote command execution and potential root privileges on the device. Affected component: urlfilter in the firmware; impact includes high confidentiality, integrity, and avai...

CVE-2026-71984

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the urlfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the urlfilter function to inject malicious commands and obtain root...